Information Disclosure Vulnerability in Netcore NR268 Router

CVE-2026-108930

What is CVE-2026-108930?

An information disclosure vulnerability exists in the Netcore NR268 router, specifically within the ddns_wan_list_show function of the DDNS Handler component. Attackers may exploit this flaw by manipulating the user_idN/passwordN parameters in the ddns_wan_list_show.cgi file, potentially allowing unauthorized access to sensitive information. This vulnerability can be exploited remotely, increasing the risk of exposure. The vendor was made aware of this issue but has not responded to the disclosure, which highlights a lack of support for users facing this security concern.

References